6504d042f8e452b67da0365221736a0b

Sharing

Copy URL

Twitter E-mail

General

Target

6504d042f8e452b67da0365221736a0b
Size

244KB
MD5

6504d042f8e452b67da0365221736a0b
SHA1

cd26194dfedb3a3fd77d779d1b0812dd2ba84b79
SHA256

7bf8b9aa9c63656ddd1dc70a08814ca946d1fc140b2f6a0ba84e2ba9b05ae41e
SHA512

bf80d33c1abeaf293bd5358a1cdafecd3f63f4bf185cca5f0facf4ad8274959a03ec3e4b7734e91cf51365f6efa2f78296faa4f087d8b5b674d00463fb2e35b4
SSDEEP

6144:zOUj+bBvkSHQeZdz+654mE/vf9pd7ngyqhY:zOUj+bBDHLZdK6amE/NVcY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6504d042f8e452b67da0365221736a0b

Files

6504d042f8e452b67da0365221736a0b
.exe windows:4 windows x86 arch:x86

5eaf29cc37afb1fa36093dd85e68f46c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
lstrcmpiA
SetFilePointer
RaiseException
ExitProcess
lstrcatA
lstrlenA
SizeofResource
IsBadReadPtr
ExitThread
lstrcpyA
MulDiv
GetVersionExA
LocalReAlloc
GetModuleHandleA
VirtualAlloc
IsBadHugeReadPtr
WriteFile
LoadLibraryExA
GetCommandLineA
GetProcAddress
SetHandleCount
VirtualFree
LoadLibraryA
SetLastError
VirtualQuery
WideCharToMultiByte
MoveFileA
SetThreadLocale
GetCommandLineW
SetErrorMode
lstrcmpA
LocalFree

gdi32

CreateDIBitmap
CopyEnhMetaFileA
SaveDC
CreateBitmap
GetDIBColorTable
SetPixel
BitBlt

user32

SendMessageA
SetPropA
GetClientRect
CharLowerBuffA
WindowFromPoint
RemoveMenu
FrameRect
CreatePopupMenu
MoveWindow
GetFocus
GetMenuItemCount
GetScrollRange
CharNextA
SetForegroundWindow
InvalidateRect
GetClassNameA
InsertMenuA
CharUpperBuffA
SetWindowsHookExA
GetMenuItemInfoA
TranslateMDISysAccel
ReleaseCapture
CharLowerA
GetScrollInfo
GetMenuStringA
GetMenuState
GetForegroundWindow
IsChild
EnumWindows
DefWindowProcA
DrawTextA
GetMessagePos
GetWindowLongA
GetClipboardData
GetCursor
DrawMenuBar
DrawIcon
DrawFrameControl
PostMessageA
IsWindowUnicode
DrawEdge
GetIconInfo
ShowWindow
GetKeyboardLayout
SetMenu
SetWindowTextA
IntersectRect
SetWindowLongA
GetWindowRect
ScrollWindow
IsDialogMessageW
SetScrollInfo
GetWindowDC
GetKeyboardState
GetWindow
GetMenuItemID
IsIconic
EnumChildWindows
wsprintfA
GetKeyState
IsWindowVisible
IsRectEmpty
IsZoomed
GetKeyboardType
DestroyWindow
MapWindowPoints
GetSysColor
GetSystemMetrics
GetDesktopWindow
DrawIconEx
EnableMenuItem
EndPaint
GetParent
DestroyIcon
OffsetRect
GetTopWindow
GetMenu
TranslateMessage
RemovePropA
IsWindowEnabled
CreateMenu
EnableScrollBar
PeekMessageA
RegisterClipboardFormatA
DeleteMenu
ReleaseDC
GetScrollPos
GetWindowThreadProcessId
GetWindowLongW
GetSysColorBrush
EqualRect

Sections

CODE
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES72
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES77
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES43
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES99
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES16
Size: 512B - Virtual size: 109B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES23
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES11
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES89
Size: 1024B - Virtual size: 791B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5eaf29cc37afb1fa36093dd85e68f46c

Headers

File Characteristics

Imports

kernel32

gdi32

user32

Sections

CODE Size: 73KB - Virtual size: 73KB

.data Size: 157KB - Virtual size: 157KB

.RES72 Size: 1024B - Virtual size: 544B

.RES77 Size: 1024B - Virtual size: 533B

.RES43 Size: 3KB - Virtual size: 3KB

.RES99 Size: 512B - Virtual size: 119B

.RES16 Size: 512B - Virtual size: 109B

.RES23 Size: 512B - Virtual size: 139B

.RES11 Size: 1KB - Virtual size: 1KB

.RES89 Size: 1024B - Virtual size: 791B

.rsrc Size: 2KB - Virtual size: 2KB

CODE
Size: 73KB - Virtual size: 73KB

.data
Size: 157KB - Virtual size: 157KB

.RES72
Size: 1024B - Virtual size: 544B

.RES77
Size: 1024B - Virtual size: 533B

.RES43
Size: 3KB - Virtual size: 3KB

.RES99
Size: 512B - Virtual size: 119B

.RES16
Size: 512B - Virtual size: 109B

.RES23
Size: 512B - Virtual size: 139B

.RES11
Size: 1KB - Virtual size: 1KB

.RES89
Size: 1024B - Virtual size: 791B

.rsrc
Size: 2KB - Virtual size: 2KB